Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8fbHcesl1-D3UiS4VzsIzmXSrKw.roa
File: 8fbHcesl1-D3UiS4VzsIzmXSrKw.roa (raw, json)
Hash identifier: eB8ab2yU77HokXhqH5PjdLQD1BnB3JNa454299cmekA=
Subject key identifier: F1:F6:C7:71:EB:25:D7:E0:F7:52:24:B8:57:3B:08:CE:65:D2:AC:AC
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 0197C462FBF3DE5D438743263F65F6805714
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8fbHcesl1-D3UiS4VzsIzmXSrKw.roa
Signing time: Tue 01 Jul 2025 05:08:30 +0000
ROA not before: Tue 01 Jul 2025 05:08:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215287
IP address blocks: 93.113.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 19:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:62:fb:f3:de:5d:43:87:43:26:3f:65:f6:80:57:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jul 1 05:08:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f1f6c771eb25d7e0f75224b8573b08ce65d2acac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:54:f7:7b:c0:f9:2f:96:11:5d:08:0c:b1:a5:
60:81:7c:98:7a:9d:4c:bb:d1:1c:d2:80:7c:da:31:
be:23:0f:a3:67:50:7a:fa:83:5c:9f:c3:30:9d:30:
d7:bb:70:88:6d:fb:57:bd:8e:40:ae:05:7f:28:b1:
1c:1f:79:65:d6:b4:70:93:0c:95:4d:6a:f4:ea:92:
d2:7c:e3:89:79:2a:9d:ff:2e:99:5a:1d:00:13:a9:
a5:06:c2:b4:7d:84:d5:3c:2b:29:31:36:9c:8b:d0:
e6:2a:c2:0f:af:33:8f:3e:3f:ba:06:f7:20:9c:ad:
7d:08:da:72:3a:bb:43:2d:01:e9:60:ef:ac:16:64:
b4:b1:86:da:7f:0c:16:af:5e:9a:b6:39:e1:51:2b:
8b:04:71:ad:db:5e:2d:af:7d:b3:da:9f:28:70:03:
bb:e8:51:de:c0:f6:47:f6:fa:14:a5:88:dd:86:64:
c2:50:38:7e:ae:44:07:48:0a:84:86:cd:db:c1:58:
42:25:b7:2b:f9:e3:9d:a0:31:95:cf:f1:c5:07:8a:
59:a5:e3:60:88:8c:9b:85:3c:08:e0:9b:3e:28:99:
80:7a:00:41:91:b4:3c:29:79:34:d1:4a:d1:bc:14:
11:1c:7c:68:e2:27:33:ff:66:4a:d9:40:4f:46:d7:
3b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:F6:C7:71:EB:25:D7:E0:F7:52:24:B8:57:3B:08:CE:65:D2:AC:AC
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8fbHcesl1-D3UiS4VzsIzmXSrKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.113.177.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:3a:ca:58:56:21:5c:7c:73:36:59:18:ec:da:d2:65:cf:92:
a7:b4:ef:5b:b7:a9:bd:3b:8e:60:5c:19:ae:88:5a:3a:01:d7:
58:7f:e5:b4:17:de:e7:01:73:0f:ed:8f:08:89:37:5d:31:df:
51:a3:4a:de:23:9e:e0:62:d3:27:b3:ad:1e:97:84:a0:b8:d2:
b6:dd:af:d8:6f:cf:d2:72:85:54:3b:fb:97:7f:d8:ea:df:22:
82:3b:ed:07:f2:c0:5d:c6:6d:5c:02:5f:2a:10:46:be:08:28:
7a:52:22:53:18:de:10:4b:35:ce:f2:d0:ca:40:91:c5:b7:0b:
c2:c3:af:fd:24:fd:02:b8:9d:a9:7a:ba:8e:40:20:8e:af:e4:
12:e9:3e:2b:7f:19:44:7a:f5:1f:09:06:8f:ae:49:d5:38:76:
62:20:8a:b6:bf:a5:86:4f:69:85:2f:dc:d9:40:9d:b3:00:29:
85:5a:3d:7b:39:2c:a9:d6:54:6b:8d:59:c5:96:71:ea:fe:46:
1f:27:ae:75:12:d5:09:9d:5b:1b:ce:c9:44:ef:ea:44:ca:8a:
76:c2:a5:c3:c5:f7:b6:01:b7:e2:79:76:14:c8:57:34:5e:d6:
a9:4e:17:d1:ab:19:ba:ba:e8:32:07:98:92:51:a1:fd:51:f4:
ce:2b:ae:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 03:50:25 2025 by rpki-client